PT-2013-3161 · Oracle+1 · Javafx+3

Published 2013-02-01 · Updated 2022-05-13 · CVE-2013-1479

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Java SE versions 7 through Update 11 Java SE versions 6 through Update 38 JavaFX versions 2.2.4 and earlier

Description The issue affects confidentiality, integrity, and availability. Details about the nature of the vulnerability are not specified, but it is known to allow remote attackers to exploit it via unknown vectors.

Recommendations For Java SE versions 7 through Update 11, update to a version later than Update 11. For Java SE versions 6 through Update 38, update to a version later than Update 38. For JavaFX versions 2.2.4 and earlier, update to a version later than 2.2.4.

Exploit

Fix

Related Identifiers

CVE-2013-1479

RHSA-2013:0237

RHSA-2013_0237

ZDI-13-023

Affected Products

Java Platform

Java Se

Javafx

Red Hat

References · 56

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/java_jre17_jmxbean_2.rb · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2013-1479 · Security Note
• http://marc.info/?l=bugtraq&m=136733161405818&w=2 · Vendor Advisory
• https://zerodayinitiative.com/advisories/ZDI-13-023 · Security Note
• https://bdu.fstec.ru/vul/2022-03803 · Security Note
• http://oracle.com/technetwork/topics/security/javacpufeb2013-1841061.html · Vendor Advisory
• http://rhn.redhat.com/errata/RHSA-2013-0237.html · Vendor Advisory
• http://us-cert.gov/cas/techalerts/TA13-032A.html · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1479 · Note
• https://access.redhat.com/security/cve/CVE-2013-0445 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16531 · Note
• https://access.redhat.com/security/cve/CVE-2012-1541 · Note
• https://access.redhat.com/security/cve/CVE-2013-0441 · Note
• https://access.redhat.com/security/cve/CVE-2013-0435 · Note
• https://access.redhat.com/security/cve/CVE-2013-0446 · Note